Logging server log issues

[tommyV]

We have R81.20 logging server that for some reason will stop displaying current logs. We reboot the managment server and then we see the logs. It is very hard to troubleshoot when we have this behavior happening. Cannot rely on what we see in logs. Has anyone ever had this issue? Thanks in advance for any info. 

[Chris_Atkinson]

Do you see traffic on port 257 while the issue is occuring or no? (verify with netstat / tcpdump)

Some other useful commands include:

Management:

cpstat mg -f log_server

Log server:

cpstat ls -f logging

Gateway:

cpstat fw -f log_connection

[AkosBakos]

Hi,

Do you see any system related log in the SmartView? I mean that is there any error logs before it stops showing the logs?
Check the /var/log/messages , maybe there are relevant entries, eg.: cpm has stoppped 

A